Wireshark-users: [Wireshark-users] FW: Processing large capture file

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "mitchellch" <mitchellch@xxxxxxxxxxx>
Date: Mon, 17 Jul 2006 09:34:50 -0700

Hey,

 

I’ve got a rather large (~1.6GB) capture file that I need to analyze using WireShark.  Unfortunately, when I try to open/load the capture file I get what appears to be an out-of-memory condition when the file is ~47% loaded.  I was able to get some statistics using capinfos.  Is there a way to further analyze this file?

 

I suppose that one option is to split the file during capture, are there any other options?

 

I am running Windows version 0.99.2pre1 on a Win XP Pro system (v5.1.2600 SP 2) with 2GB RAM (with a 3.8GB page file).

 

Any suggestions would be greatly appreciated.

 

-Mitch